Co-leader of Manatt’s privacy and data security practice Scott Lashway spoke with Law360 about the California Consumer Privacy Act (CCPA), which went into effect on January 1. In the article, he noted that companies have been primarily focused on the CCPA’s privacy policy requirements for the past 18 months, but that organizations have not been paying enough attention to their potential liability for data security incidents. “On Day 1, the most likely litigation that we are going to see is because of a data breach, but we don't see companies as focused on the security aspects of the CCPA as they are on privacy disclosure,” Lashway said.
Read the article here.